CVE-2015-1438
High
Description
Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers.
SeverityHigh
CVSS7.8
Exploit probability—
ProductPanda Security Panda Antivirus Pro
PublishedJul 25, 2017
First seenJul 25, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| panda_security panda_antivirus_pro_2015 | 1.0.0.13 | — |
| panda_security panda_global_protection_2015 | 1.0.0.13 | — |
| panda_security panda_gold_protection_2015 | 1.0.0.13 | — |
| panda_security panda_internet_security_2015 | 1.0.0.13 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.